Role-based access (Super Admin, Operations Admin, Support Admin, Finance Admin, Verification Admin). MFA/2FA and password reset are handled by the platform auth system.